iblai-api-studio-auth

Studio (the Open edX CMS) has no token API for authoring: every authoring endpoint is guarded by a Django session cookie + CSRF token. This skill captures that session from a browser the user signs into, verifies it against Studio and the LMS (the LMS side shares the same login), and stores it in studio.env. Run it once per host; sessions last about two weeks.

Preflight — run this before any other Studio skill

node .claude/skills/iblai-api-studio-auth/scripts/studio-login.mjs --check && grep -q '^STUDIO_ORG=.\+' studio.env && echo "STUDIO_ORG set" || echo "MISSING: run /iblai-api-studio-auth and set STUDIO_ORG in studio.env"

--check prints studio: ok · lms: ok and exits 0 when both sessions work, exits 2 when the file is missing or a session expired. Every other /iblai-api-studio-* skill starts with this line; when it fails, come back here instead of retrying calls.